Security Advisory

CVE-2019-9078

CVE vulnerability detail - eXtreme Datacenter Security Operations

Published 2019-02-24 17:00:00

Last updated 2024-08-04 21:38:46

Assigner mitre

CVSS score not scored

State PUBLISHED

zzcms 2019 has XSS via an arbitrary user/ask.php?do=modify parameter because inc/stopsqlin.php does not block a mixed-case string such as sCrIpT.